Repositories list

• kube-bench

  Public

  aquasecurity/kube-bench’s past year of commit activity
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

  kubernetesopenshifthacktoberfest+ 5cis-benchmarkkube-benchkubernetes-securitycis-kubernetes-benchmarkcis-security

  Go

  •

  Apache License 2.0

  •1.3k•7.8k•59•21•Updated Dec 18, 2025Dec 18, 2025

• starboard

  Public

  aquasecurity/starboard’s past year of commit activity
  Superseded by https://github.com/aquasecurity/trivy-operator

  kubernetessecuritycloud-native+ 2starboardcustom-resource-definition

  Go

  •

  Apache License 2.0

  •198•1.4k•40•19•Updated Dec 18, 2025Dec 18, 2025

• vuln-list

  Public

  aquasecurity/vuln-list’s past year of commit activity
  NVD, Ubuntu, Alpine

  33•445•11•0•Updated Dec 18, 2025Dec 18, 2025

• vuln-list-redhat

  Public

  aquasecurity/vuln-list-redhat’s past year of commit activity
  Red Hat security advisories

  18•10•0•0•Updated Dec 18, 2025Dec 18, 2025

• secfixes-tracker

  Public

  aquasecurity/secfixes-tracker’s past year of commit activity
  Forked from https://gitlab.alpinelinux.org/kaniini/secfixes-tracker

  Python

  •

  Other

  •7•7•0•0•Updated Dec 18, 2025Dec 18, 2025

• vuln-list-nvd

  Public
  NVD

  11•12•0•0•Updated Dec 18, 2025Dec 18, 2025

• vexhub

  Public

  aquasecurity/vexhub’s past year of commit activity
  Apache License 2.0

  •5•30•0•0•Updated Dec 18, 2025Dec 18, 2025

• vuln-list-debian

  Public

  aquasecurity/vuln-list-debian’s past year of commit activity
  Debian Security Tracker

  14•6•0•0•Updated Dec 18, 2025Dec 18, 2025

• trivy-plugin-index

  Public

  aquasecurity/trivy-plugin-index’s past year of commit activity
  Plugin index for Trivy. This repo is for plugin maintainers.

  Go

  •

  Apache License 2.0

  •7•6•0•2•Updated Dec 18, 2025Dec 18, 2025

• terraform-provider-aquasec

  Public

  aquasecurity/terraform-provider-aquasec’s past year of commit activity
  The Aqua Security Provider for Terraform allows you to declaratively define the configuration of your Aqua platform.

  Go

  •

  Apache License 2.0

  •41•37•5•4•Updated Dec 17, 2025Dec 17, 2025

• trivy-mcp

  Public

  aquasecurity/trivy-mcp’s past year of commit activity
  Trivy plugin for starting an MCP server

  vscodecursorsecurity-scanner+ 3claudetrivymcp-server

  Go

  •

  MIT License

  •4•30•2•0•Updated Dec 17, 2025Dec 17, 2025

• tracee

  Public

  aquasecurity/tracee’s past year of commit activity
  Linux Runtime Security and Forensics using eBPF

  linuxdockerkubernetes+ 5golangsecurityebpfbpfruntime-security

  Go

  •

  Apache License 2.0

  •476•4.3k•123•18•Updated Dec 17, 2025Dec 17, 2025

• vuln-list-update

  Public

  aquasecurity/vuln-list-update’s past year of commit activity
  Go

  •

  Apache License 2.0

  •112•189•7•16•Updated Dec 17, 2025Dec 17, 2025

• helm-charts

  Public
  Aqua Open Source Helm Chart Repository

  open-sourcecharthelm+ 1aqua

  Apache License 2.0

  •10•19•2•1•Updated Dec 17, 2025Dec 17, 2025

• trivy

  Public
  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  godockerkubernetes+ 12golangsecuritycontainersiacvulnerabilityinfrastructure-as-codevulnerability-detection+ 5

  Go

  •

  Apache License 2.0

  •2.8k•31k•168•50•Updated Dec 17, 2025Dec 17, 2025

• trivy-chocolatey

  Public

  aquasecurity/trivy-chocolatey’s past year of commit activity
  Repository for storing Trivy chocolatey deployment config

  Shell

  •0•0•0•0•Updated Dec 17, 2025Dec 17, 2025

• trivy-repo

  Public

  aquasecurity/trivy-repo’s past year of commit activity
  deb/rpm repository for Trivy

  Apache License 2.0

  •13•10•8•2•Updated Dec 17, 2025Dec 17, 2025

• homebrew-trivy

  Public

  aquasecurity/homebrew-trivy’s past year of commit activity
  Ruby

  •7•5•0•1•Updated Dec 17, 2025Dec 17, 2025

• trivy-operator

  Public

  aquasecurity/trivy-operator’s past year of commit activity
  Kubernetes-native security toolkit

  kubernetesgolangsecurity+ 7operatorcloud-nativevulnerability-detectionvulnerability-scannerssecurity-toolsmisconfigurationoctoberfest

  Go

  •

  Apache License 2.0

  •255•1.7k•124•51•Updated Dec 15, 2025Dec 15, 2025

• trivy-checks

  Public

  aquasecurity/trivy-checks’s past year of commit activity
  Open Policy Agent

  •

  MIT License

  •46•62•2•10•Updated Dec 15, 2025Dec 15, 2025

• vuln-list-aqua

  Public
  Security advisories from Aqua Security

  Apache License 2.0

  •8•5•1•0•Updated Dec 15, 2025Dec 15, 2025

• trivy-plugin-aqua

  Public
  Makefile

  •

  Apache License 2.0

  •10•11•3•0•Updated Dec 15, 2025Dec 15, 2025

• aqua-helm

  Public
  Helm Charts For Installing Aqua Security Components

  kubernetesscannerhelm-charts+ 4security-toolsenforceraqua-agentaqua-server

  Mustache

  •

  Apache License 2.0

  •189•88•8•4•Updated Dec 15, 2025Dec 15, 2025

• trivy-db

  Public
  hacktoberfest

  Go

  •

  Apache License 2.0

  •170•288•47•25•Updated Dec 15, 2025Dec 15, 2025

• btfhub

  Public
  BTFhub, in collaboration with the BTFhub Archive repository, supplies BTF files for all published kernels that lack native support for embedded BTF. This joint effort ensures that even kernels without built-in BTF support can effectively leverage the benefits of eBPF programs, promoting compatibility across various kernel versions.

  linuxkernelebpf+ 1btf

  Go

  •

  Apache License 2.0

  •51•462•7•0•Updated Dec 11, 2025Dec 11, 2025

• trivy-action

  Public
  Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

  securitytoolsscanner+ 4vulnerabilityscanningdevsecopsgithub-actions

  Shell

  •

  Apache License 2.0

  •286•1.1k•144•16•Updated Dec 11, 2025Dec 11, 2025

• linux-bench

  Public

  aquasecurity/linux-bench’s past year of commit activity
  Checks whether a Linux server according to security best practices as defined in the CIS Distribution-Independent Linux Benchmark

  linux-cis

  Go

  •

  Apache License 2.0

  •64•180•8•3•Updated Dec 10, 2025Dec 10, 2025

• avd-generator

  Public

  aquasecurity/avd-generator’s past year of commit activity
  Generator component for AVD

  CSS

  •

  Apache License 2.0

  •15•6•1•3•Updated Dec 9, 2025Dec 9, 2025

• btfhub-archive

  Public

  aquasecurity/btfhub-archive’s past year of commit activity
  The BTFhub Archive repository provides BTF files for those published kernels that lack native support for embedded BTF, thereby enhancing the versatility of eBPF programs across different kernel versions.

  Apache License 2.0

  •27•126•0•0•Updated Dec 9, 2025Dec 9, 2025

• deployments

  Public
  All Aqua deployments options and aquactl configuration

  Shell

  •

  Apache License 2.0

  •108•63•3•13•Updated Dec 6, 2025Dec 6, 2025